CVE-2023-7304: Ruijie RG-UAC nmc_sync.php Command Injection
Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmcsync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the host. Successful exploitation can yield full control of the application process and may lead to system-level access depending on the service privileges. VulnCheck has observed this vulnerability being targeted by the RondoDox botnet campaign.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7304?
CVE-2023-7304 is categorized as a high severity command injection vulnerability.
How do I fix CVE-2023-7304?
To fix CVE-2023-7304, apply the latest security patches provided by Ruijie for the RG-UAC Application Management Gateway.
What type of attack can be executed via CVE-2023-7304?
An attacker can execute arbitrary commands on the server by exploiting the command injection vulnerability in nmc_sync.php.
Who is affected by CVE-2023-7304?
Any instance of the Ruijie RG-UAC Application Management Gateway that can be accessed by unauthenticated users is affected by CVE-2023-7304.
Is authentication required to exploit CVE-2023-7304?
No, CVE-2023-7304 can be exploited by unauthenticated attackers, making it particularly dangerous.